Penetration Testing Engineer, MTS

Salesforce

. Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure including Kubernetes and Docker, identity and trust boundaries, and AI/ML-enabled systems .

Posted 10/14/2026full-timeUnited StatesJuniorMid-Level💰 $117,200 - $194,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing across web applications, APIs, and cloud infrastructures, with a strong understanding of application security vulnerabilities and AI/ML security risks. Capable of producing detailed reports and collaborating effectively with engineering and security teams on remediation efforts.

Highest-signal resume keywords

Penetration TestingOffensive SecurityApplication Security TestingCloud Security FundamentalsAI/ML Security Risks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Manual ExploitationBusiness Logic AbusePrivilege EscalationIdentity/Access Trust Relationship AbuseCustom Scripts DevelopmentPayload DevelopmentVulnerability DiscoveryRisk AssessmentSecurity Control MitigationExploitation Mechanics

Soft Skills

Clear ArticulationCollaboration

Tools & Technologies

KubernetesDockerAI ToolsAutomation Tools

Industry Keywords

Bug Bounty ProgramsIdentity-Centric Security ModelsCloud ArchitecturesApplication Security VulnerabilitiesAttack Chains

Tech Stack

Tools & technologies

CloudDockerKubernetes

About the role

Key responsibilities & impact

Execute penetration tests across web applications, APIs, cloud/hybrid infrastructure including Kubernetes and Docker, identity and trust boundaries, and AI/ML-enabled systems
Test for prompt injection and abuse of AI integrations
Perform manual exploitation beyond automated tooling, including business logic abuse, privilege escalation, and identity/access trust relationship abuse
Support engagements through scoping, execution, risk assessment, and reporting
Produce technically detailed reports covering exploitation paths, missing security controls, and mitigation recommendations
Collaborate with engineering, AppSec, and Detection & Response teams on findings and remediation

Requirements

What you’ll need

2-4 years of hands-on experience in penetration testing, offensive security, or application security testing
Experience performing penetration testing engagements in production or production-like environments
Experience using manual techniques and automation/AI tools
Understanding of application security vulnerabilities and attack chains
Understanding of identity and access control failures
Understanding of cloud security fundamentals
Understanding of security risks specific to AI and LLM-based systems
Ability to clearly articulate exploitation mechanics, impact, and practical remediation steps to engineers and security teams
Experience with custom scripts, payloads, or proof-of-concept development is an advantage
Participation in Bug Bounty programs is an advantage
Familiarity with cloud architectures and identity-centric security models is an advantage
Experience using AI/LLMs for offensive security work or vulnerability discovery is an advantage

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for certain roles
Equity may be available for certain roles